CVE-2008-7213: XSS
Cross-site scripting (XSS) vulnerability in mambots/editors/mostlyce/jscripts/tinymce/filemanager/connectors/php/connector.php in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to inject arbitrary web script or HTML via the Command parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-7213?
CVE-2008-7213 is classified as a medium severity vulnerability due to its potential for exploiting cross-site scripting (XSS).
How do I fix CVE-2008-7213?
To fix CVE-2008-7213, upgrade to MOStlyCE version 2.4 or later, or ensure that Mambo is updated to a version higher than 4.6.3.
Who is affected by CVE-2008-7213?
CVE-2008-7213 affects users of Mambo version 4.6.3 and earlier, as well as MOStlyCE versions up to and including 2.0.
What types of attacks can be performed using CVE-2008-7213?
CVE-2008-7213 allows attackers to execute arbitrary web scripts or HTML, leading to possible data theft, session hijacking, or site defacement.
When was CVE-2008-7213 discovered?
CVE-2008-7213 was publicly disclosed in February 2008.